[ https://issues.apache.org/jira/browse/DIRSERVER-2363?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Emmanuel Lécharny updated DIRSERVER-2363: ----------------------------------------- Component/s: security > Use FIPS-compliant Bouncy Castle > -------------------------------- > > Key: DIRSERVER-2363 > URL: https://issues.apache.org/jira/browse/DIRSERVER-2363 > Project: Directory ApacheDS > Issue Type: Improvement > Components: security > Reporter: Andrew Watson > Priority: Major > > *org.apache.directory.server* is currently using a non-FIPS compliant Bouncy > Castle > [https://en.wikipedia.org/wiki/FIPS_140] > See here, for example > [https://github.com/apache/directory-server/blob/master/core/src/main/java/org/apache/directory/server/core/security/TlsKeyGenerator.java#L54] > It would be helpful if FIPS compliance could be introduced here (for projects > looking to achieve FIPS compliance and which uptake > {*}org.apache.directory.server{*}), in part by moving to the FIPS-compliant > {*}org.bouncycastle:bc-fips{*}. -- This message was sent by Atlassian Jira (v8.20.10#820010) --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org